Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/uPElmUFsSvpEzSilQMDbqCzS8Jo.roa
File: uPElmUFsSvpEzSilQMDbqCzS8Jo.roa (raw, json)
Hash identifier: BJ7IAXWKAVLpuFAgkg00HTXBo8ejpZRypEvxMLb2Eek=
Subject key identifier: B8:F1:25:99:41:6C:4A:FA:44:CD:28:A5:40:C0:DB:A8:2C:D2:F0:9A
Certificate issuer: /CN=dda5a222acb99ab2398439eded7770a65ee66de6
Certificate serial: 01820119E4A23FA9401AABEC8167A12094DD
Authority key identifier: DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/uPElmUFsSvpEzSilQMDbqCzS8Jo.roa
Signing time: Fri 15 Jul 2022 09:04:10 +0000
ROA not before: Fri 15 Jul 2022 09:04:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198298
IP address blocks: 194.33.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:01:19:e4:a2:3f:a9:40:1a:ab:ec:81:67:a1:20:94:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dda5a222acb99ab2398439eded7770a65ee66de6
Validity
Not Before: Jul 15 09:04:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b8f12599416c4afa44cd28a540c0dba82cd2f09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8f:4c:96:3e:a6:d5:11:bf:0e:e5:77:23:9c:
3b:e0:00:f8:2d:8d:99:5a:1f:74:08:9e:90:71:ab:
19:30:21:a3:da:c8:6f:bb:ee:46:03:94:f7:25:df:
98:b0:14:39:ac:84:f3:f2:4d:fa:9e:a3:b0:41:e5:
2d:dc:8e:33:1c:af:1b:62:06:79:3e:04:a0:88:c5:
7f:3f:08:aa:5c:bd:b4:b1:e6:94:93:e6:d6:d5:45:
fc:16:0e:dc:e7:95:5c:00:0c:7f:f7:0c:87:ad:ab:
ac:03:5e:ed:c9:c6:a7:f4:e1:0e:fe:0b:bc:f7:58:
ef:17:3c:f0:f3:a0:31:f4:47:8c:c8:41:62:91:8c:
a4:23:75:59:1b:5d:10:96:bf:61:f5:90:c0:8d:ff:
a6:a5:f0:63:c0:d1:5c:37:f2:e7:fb:50:4f:c6:0d:
1d:7d:ae:f7:d5:a6:33:52:5e:75:fe:eb:54:3b:95:
3e:f9:af:26:26:d3:db:c9:f2:ef:bb:7a:8f:b4:88:
d5:99:77:5d:88:1f:d2:f3:e0:1f:86:c8:23:37:74:
4c:98:67:f3:82:ba:90:b2:2e:aa:c0:14:4b:39:f6:
7b:e3:2a:ee:cf:92:d2:6c:7b:f7:db:bc:70:48:3b:
32:01:69:12:30:de:79:97:5e:c3:bb:44:22:39:01:
26:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F1:25:99:41:6C:4A:FA:44:CD:28:A5:40:C0:DB:A8:2C:D2:F0:9A
X509v3 Authority Key Identifier:
keyid:DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/uPElmUFsSvpEzSilQMDbqCzS8Jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.12.0/24
Signature Algorithm: sha256WithRSAEncryption
27:1f:2e:78:41:7a:6b:50:77:96:2e:23:a2:76:4b:70:3e:26:
ac:9f:a6:85:0a:81:8a:b7:7a:90:96:dd:89:e0:5f:a3:d0:8e:
45:4c:ab:ed:5f:42:a4:80:e9:10:34:c5:45:e5:29:3d:38:f9:
68:de:42:05:04:ea:37:5e:52:dc:9e:f7:16:d8:dc:b6:43:cf:
ac:3b:51:86:e6:3a:7f:09:bb:e7:f8:1d:3d:5b:bc:9e:28:86:
97:5e:92:6d:b3:7b:84:d4:a4:b0:1f:23:17:96:68:24:81:3a:
7c:2b:6d:5d:0c:d5:cd:f6:7e:9d:4a:68:36:52:89:03:c8:64:
e1:8e:15:aa:4f:56:de:4f:56:64:45:6c:bf:75:d3:00:81:18:
5d:e3:84:e5:e6:61:51:f2:8d:9d:58:5c:07:63:05:59:9e:55:
bd:a5:21:41:eb:36:bc:2b:d0:e9:b2:3e:73:62:c1:db:d2:6b:
c5:8b:4d:b4:60:8a:3d:0c:a3:d0:48:52:80:21:6f:fd:9e:72:
82:95:da:3d:02:93:ce:0b:2e:db:2c:5f:95:74:f8:df:53:b9:
5b:27:65:9c:15:5b:f8:a0:ff:e0:87:7d:9e:94:3a:1c:46:50:
e0:ce:91:84:22:c8:53:0c:2b:84:4a:31:2c:b1:2f:74:1b:09:
41:fa:1c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:16 2024 by rpki-client on console-fra.rpki-client.org